Food to MindPrivacy Policy
The short version
- You can use the app without an account. If you sign in, Clerk processes your email or Apple/Google sign-in details and your journal becomes linked to an account ID.
- Meal photos you choose are sent for analysis and are kept until you delete the meal or reset the app.
- Your check-ins stay linked to that device ID so the app can personalise your forecasts.
- We do not sell data, show ads, or use advertising identifiers, and we do not track you across other apps or websites.
- “Reset local data” in the You tab erases your journal and subscription link from your device and our servers.
Who we are
Food to Mind is operated by Ajit Singh (“we”, “us”). You can reach us at support@foodtomind.app. This policy explains what the Food to Mind app collects, why, and the choices you have.
What the app collects
| Data | Why |
|---|---|
| Meal photos you take or pick from your library | To recognise the meal and produce its forecast. Only photos you explicitly choose are uploaded; the app never reads your library in the background. |
| Check-ins: your mood, focus, and mental clarity ratings, the symptoms you tap, and when you answered | To compare forecasts with how meals actually landed and to surface your personal patterns. |
| Your goal chosen during onboarding | To tune which check-in questions you see. |
| A device identifier: a random ID generated on first launch, plus a signed access token derived from it | To keep your journal attached to the installation when you use the app without an account. It is not your phone’s hardware ID or advertising ID. |
| Account details: your email address and, if supplied by Apple or Google, your name | Only if you choose to sign in, so your journal and Premium access can follow you to another device. Our API receives an opaque Clerk user ID rather than your email or name. |
| Subscription status | To unlock Premium. Purchases are processed by Apple or Google; we never see your card details. RevenueCat, our subscription service, uses an anonymous app user ID to track the purchase. |
| Product usage events, such as opening the app, completing onboarding, viewing the paywall, or logging a meal | To understand whether the product works and where people get stuck. Events contain a one-way pseudonymous install identifier and short fixed properties; they never contain photos, meal names, symptoms, access tokens, advertising identifiers, or free text. |
| Technical logs and error reports | To keep the service running and fix bugs. Error reporting is configured so that photos, access tokens, and request bodies are never included. |
We do not collect contacts, location, health records from other apps, or the advertising identifier (IDFA/GAID). We receive account contact details only when you choose to sign in. Meal reminders are scheduled locally on your phone and are not sent through a push-notification service.
How we use it
- To analyse your meal photo and show a forecast for your mood, focus, and mental clarity.
- To build personal insights once you have logged a few check-ins.
- To prevent abuse of the service, for example by limiting how many analyses one device or network address can request per hour.
- To diagnose and fix errors.
We do not use your photos or check-ins for advertising, and we do not sell or rent them to anyone.
Who processes it for us
We use a small number of service providers, each only for the purpose described:
| Provider | What they receive |
|---|---|
| Google Cloud (Vertex AI) | The meal photo for recognition. For Premium coach notes, it also receives a structured journal summary containing meal names and times, detected foods and traits, check-in scores, and selected symptom labels. Processed under Google Cloud’s terms, which do not permit Google to use customer data to train its models. |
| Cloudflare | Stored meal photos (Cloudflare R2) and network delivery. |
| Our hosting provider | Runs the Food to Mind API and database, which holds your analyses, check-ins, device ID, and subscription status. |
| RevenueCat | An anonymous app user ID and purchase receipts, to validate subscriptions. |
| Clerk | Your email address or Apple/Google account details if you choose to sign in, plus session and device security information needed to authenticate the account. Our API receives Clerk's signed opaque user ID. |
| Apple App Store / Google Play | Your purchase, under their own privacy policies. |
| Sentry | Error reports with technical details about what failed — never photos, tokens, or request contents. |
| OpenPanel (self-hosted by us) | The fixed product usage events described above and a one-way pseudonymous install identifier. OpenPanel credentials stay on our server; the app does not send events directly to the analytics database. |
Some of these providers operate servers outside the country where you live, including in the United States. Where required, transfers rely on the provider’s standard contractual safeguards.
How long we keep it
- Meal photos are kept until you delete the meal or reset the app. Deleting a meal removes its stored photo at the same time.
- Analyses, check-ins, goal, account link, and subscription status are kept until you erase them (see below). Clerk keeps optional account details until you delete the account.
- Pseudonymous product usage events and billing records are retained for analytics, fraud prevention, accounting, and legal obligations. They are not used for advertising or cross-app tracking.
- Revoked-token fingerprints contain no journal data and are deleted after the longest possible token lifetime.
- Technical logs are kept for a short period for operational purposes and then discarded.
Your choices
- Erase your journal. You tab → “Reset local data” deletes your meals, photos, check-ins, goal, billing-ID link, free-use counter, and subscription status from your device and from our API. It also revokes that device token. A one-way revocation fingerprint, pseudonymous product events, and records Apple, Google, or RevenueCat must retain for billing are outside the journal deletion described here.
- Delete an optional account. If you are signed in, You tab → “Delete account” erases the journal first and then deletes the Clerk account. It does not cancel an App Store or Google Play subscription.
- Delete a single meal from the Journal tab; its photo is removed from storage at the same time.
- Camera and photo access are controlled in your phone’s Settings. The app works without them, using demo meals.
- Reminders are local notifications. Profile → Notifications opens your phone’s notification settings, where you can switch them off.
- Subscriptions are managed and cancelled through your Apple ID or Google account settings, not in the app.
Depending on where you live, you may also have rights to access, correct, port, or restrict the use of your data, and to complain to a supervisory authority. The quickest way to erase a journal or optional account is in the app; for anything else, email support@foodtomind.app and we will respond within 30 days.
Security
All traffic between the app and our servers is encrypted with TLS. Access tokens are cryptographically signed, expire, rotate, and are stored in the phone’s protected keychain or keystore. A token can only read its own journal and is revoked when that journal is reset. Photo links are time-limited and expire within an hour. Optional accounts use Apple, Google, or emailed one-time codes; we do not receive or store account passwords.
Children
Food to Mind is not directed to children and is not intended for anyone under 13, or under 16 where that is the age of digital consent. We do not knowingly collect data from children; if you believe a child has used the app, email us and we will erase the data.
Health information
Your check-ins describe how you feel after eating. They are general wellness information that you enter yourself. Food to Mind is not a medical device, does not diagnose or treat any condition, and its forecasts are estimates, not medical advice. If you have concerns about your health or diet, talk to a qualified professional.
Changes to this policy
If we change how the app handles data, we will update this page and the effective date above, and for material changes we will let you know in the app before they take effect.
Contact
Ajit Singh · support@foodtomind.app